OAuth Single Sign On – SSO (OAuth Client), CVE-2023-1093

CVE, Research URL: CVE-2023-1093
Home page URL: Security reports for OAuth Single Sign On – SSO (OAuth Client)
Application: OAuth Single Sign On – SSO (OAuth Client)
Published on: Mar 27, 2023
Research Description: The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make logged in admins delete all IdP via a CSRF attack
Affected versions: max 6.24.2.
Status: vulnerable

OAuth Single Sign On &#8211; SSO (OAuth Client), CVE-2023-1093